Red Hat Directory Server 11 vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Latest Red Hat Directory Server 11 vulnerabilities

CVE-2026-117548 — 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service (CVSS 6.5)
CVE-2026-86345 — 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result (CVSS 9.0)
CVE-2026-86344 — 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue (CVSS 7.5)
CVE-2026-19843 — 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor (CVSS 8.4)
CVE-2026-76560 — 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn (CVSS 7.5)
CVE-2026-78701 — 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos (CVSS 6.5)
CVE-2026-19404 — 389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance (CVSS 6.5)
CVE-2026-16560 — 389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn (CVSS 5.3)
CVE-2026-11884 — 389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation (CVSS 6.5)
CVE-2025-3416 — Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` (CVSS 3.7)